nodeSolidServer / nodeSolidServer/node-solid-server

local storage data generated from 4.x causes unauthorized login

Ouverte
#1,155 0 commentaires 0 réactions 0 personnes assignées Voir sur GitHub

Personne n'a encore pris cette issue.

Langage dominant
JavaScript
Étoiles
1.8k
Forks
308
Métriques de merge des PR
Aucune PR mergée en 30 j

Description

## Please describe what you did in reproducible steps

  • Boot the solid server at localhost:8443
  • Manually put the following in local storage:
    key: solid-auth-client
    value: {"rpConfig":{"provider":{"url":"https://localhost:8443/","configuration":{"issuer":"https://localhost:8443","authorization_endpoint":"https://localhost:8443/authorize","token_endpoint":"https://localhost:8443/token","userinfo_endpoint":"https://localhost:8443/userinfo","jwks_uri":"https://localhost:8443/jwks","registration_endpoint":"https://localhost:8443/register","response_types_supported":["code","code token","code id_token","id_token","id_token token","code id_token token","none"],"response_modes_supported":["query","fragment"],"grant_types_supported":["authorization_code","implicit","refresh_token","client_credentials"],"subject_types_supported":["public"],"id_token_signing_alg_values_supported":["RS256","RS384","RS512","none"],"token_endpoint_auth_methods_supported":["client_secret_basic"],"token_endpoint_auth_signing_alg_values_supported":["RS256"],"display_values_supported":[],"claim_types_supported":["normal"],"claims_supported":[],"claims_parameter_supported":false,"request_parameter_supported":true,"request_uri_parameter_supported":false,"require_request_uri_registration":false,"check_session_iframe":"https://localhost:8443/session","end_session_endpoint":"https://localhost:8443/logout"},"jwks":{"keys":[{"kid":"EpVZJI3V0CI","kty":"RSA","alg":"RS256","n":"v_xoE520Yib2OrJ69uwlWNhnqdy3iOZUkTqpz3_LL6YWjoFgrbsvmvSDICiVbGP0DXQ3lGG4IEzJ_8MYGO_EoK1FJq_N2rjgnWxHuF9GqaPX5NYwNlQMv2r-13hMf5cbgf6YOMI3jvecTeBbpQqkP9-aBhJuYRUn9H62aydosuQIF6lDYBSzUuhbUPBfUTXJHH6NmNDZCDf8mkAyER7t-LWvpe7zs8VnxcJ8MCp90Z2g2HO80wYzdRQOvTRf5VpGCdHl659ZxrzntAr3KY1QE_tjp4eZUjTxQC4oR3IsmJhv2RoOrPwyfV4K7rQr5vyKjxC43_FaHkUFVN65yy7I6Q","e":"AQAB","key_ops":["verify"],"ext":true},{"kid":"qpIoAYPuxe4","kty":"RSA","alg":"RS384","n":"vuJfhCVePAbD-nNKnXx-HMxSTxfsa4OXTOinCjPOluWdQYM3CrMXaNRBG3Dh3QiohMMliE3HsP5Y4sonyRnJIeX0qEupnd4pKk2jeJu0nDmPleOS5cU1KlVepAyy5dLXgiSLiyBidJry7uj2UDYe0_YAQVpa2bwTP4mtLiORgpLnVSwN2VfU0SYbw35V9LR4t_PV4qMKsjkiTSTF3ngpn6TLg0eP-6v_WLWU5_3Mem6Tv5lzNL1RYG0fXFKRKZky3u98X3ffC7qTejGr2s-p11sK8BusnqNXIfEc3Iz_pjgn7kiYBRzuzj6-wk95StaW1dq2nWaI3-k4qKjCim9IAQ","e":"AQAB","key_ops":["verify"],"ext":true},{"kid":"mm2-krmFbig","kty":"RSA","alg":"RS512","n":"3suqtSlzsyCFj_A35lOv4Y-hlB3TLn54Fjs0lw1byZt4kAhE0pGjcnYUwr58VuMK8KAAnscjhSeMN5g5e2uM6sANxqmRNrd_WMlCDRP7Z6Lvvv61xNdvM3KFn8ELJ9FYpdzcpuWU8TA9lMMGcyDx9a9Wfw1GMctl5dqN3KVmvqbPPoT114EFPZ4OB_JHcZxIPOO9S0Rvc_n7RAy6f77k7xaaSmFdSnCUCdIkq4k7ZBv-DYKhbRrQ0CKQgyuvIbdCBp-oG3yQVgAbdQFjYQG8OGjYes3DYMWJKzwlEDcTRTAiLjEkOeJxPjr36aeMbLUgtrNTEnwPsGDaw_erYJ3lPw","e":"AQAB","key_ops":["verify"],"ext":true},{"kid":"NFPwK55Ajxs","kty":"RSA","alg":"RS256","n":"rMmeNQUvKHjKcAaelOHXtXmri36jHMBjotU-UCZpO0RF5aDChg7DxvyMOUR6RQhanwLjlgrArWhfSwWi4Gg7GspE-M2SdFWrH15az-Hm_OM-cVqO_Dvey1zxCY_zIuR28-YDTEunP_0Jyq3dLumAj45W0OHcNFjhiNAs_ZbpE9sRktr8x-Ka4TPgLlW0gNV1MLg_q1SBgi3HQX2oHgvLW2LrSQRKN2DtCyAf83pjVPlOQGliO9vmoCUqdeMgsfX9vO4NT1G0Tb9OkXXGBbHWPF5qPkE-Y7RgcegITOcr6v0wWut4ZBWEkI2DeXS2e9YorWcvDb5uLt9tAogkCyAqWw","e":"AQAB","key_ops":["verify"],"ext":true},{"kid":"tAEZHHkwfdU","kty":"RSA","alg":"RS384","n":"sjsLlHVk7SaD4FeSjo8xh6im-X4JyEMnqB7obbOvfOqpkEEcS7KhBQEHmR3OYE8DHQ6G2oKCsjtpWhB6i2DfeSmpY_L7sgZxKYm-NPhp8ATQGxvl-8JgL60exwVycHydDmNNswDVEbdtmewSyppHHNobP6jjCmfMzcJ1C2HUaxPTvlSF4YsSVGZpdCF6gNV7OolpRpk91Yr_TdaQQ9uA88c9PeSyi2X1IaKSwDwNMy-qCW9gQ15TNtlrMXtLGu3lPhqOfM-4Yw9lO5sedUqZhO0sdRgAMO5bnNi5gaNeUXdYgyb-tKodxaUGYJ8-E-lNVNVJTQN3zB8lupuHDHg-vw","e":"AQAB","key_ops":["verify"],"ext":true},{"kid":"WY3L35a_lZA","kty":"RSA","alg":"RS512","n":"ue4e_vfFaAKp4G1vcCy2lppRKduRaRFdu4CwuSVmtyJXpwCiuAkdb5GIwIkHRaDYQPP6_wZoMOqNO9Fm_kFLuVN8NJGnE_2SyDCwexLq2o8Ls1pODBqLj2_u4Rdd8X63MVIoIv32SvvmvfjSCjzICiP9jAQoy5tLj_FA543kpGU9Gioi8l9_7eW_WWGCcPeVKfAdCskzCqioxlyygeRwPQm3oWh2gSmkZN8YQCuFDF_-ubGvQKu-brVajIOb1xU52c2w8Lp7jV9ClnE4F27ozBB6LVeeMlc4lkafROVFaKhX5XTY0MCFg0pISpqp5cIVIjuLsHNnkXCuoPYZdIMnhw","e":"AQAB","key_ops":["verify"],"ext":true},{"kid":"OyASAeexYaM","kty":"RSA","alg":"RS256","n":"8uP28UijSSP5mUfNYokEcA5i5fCk7uS_fU6NmZbqxw5qjb_YG-HtFhFPshOBjHaYrzUoagfl4Mtoepe6okwIUP_rKQcNiDR84Ob-3Vn3kqAv70mRCpFq6wvyWWbKYVR12KSeltr67GwaZWEQIV972qWP5DuKxXkwb4-zQhYMePw4eTlRWAEqdaQPSv5lJnFuqsKkcYU0SiFuCkBIGz0NGQi5s-lAyaVm2yP5FpMSEPMiKzOPXCfSlp9vIf9jSyiUmy9dosXBM2rZgEDucqHctPxvcunRYieoQwwawff0tnAS9ZxJV5OB-1_-Up6RgEb9csSAYiqiUh7djL2shmhv9w","e":"AQAB","key_ops":["verify"],"ext":true}]}},"defaults":{"popToken":false,"authenticate":{"redirect_uri":"https://localhost:8443/.well-known/solid/login","response_type":"id_token token","display":"page","scope":["openid"]}},"store":{},"registration":{"client_id":"2eb782b378ad78b40c8fe7b61034418e","redirect_uris":["https://localhost:8443/.well-known/solid/login"],"response_types":["id_token token"],"grant_types":["implicit"],"application_type":"web","id_token_signed_response_alg":"RS256","token_endpoint_auth_method":"client_secret_basic","frontchannel_logout_session_required":false,"registration_access_token":"eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2xvY2FsaG9zdDo4NDQzIiwic3ViIjoiMmViNzgyYjM3OGFkNzhiNDBjOGZlN2I2MTAzNDQxOGUiLCJhdWQiOiIyZWI3ODJiMzc4YWQ3OGI0MGM4ZmU3YjYxMDM0NDE4ZSJ9.6mikjrmuyfNi37PmGg1E-kWO1nSVTnlZCb4KN88t6FCJGEwsk1LhW1TcShUkBAEcQVy6O1iTCv09k8OSchLbcCUUEeYzC72dJqfkwbQ1xgewUYTHDhunQUiRrOe6R49b8cZmi23DLRTSUTRWI1e6HGMryzoPDQTKl5DbVuYfwaBO3QecXYKaipKs2P5zUeC0gHrhTvQDILvvCTHUazsJG8DvStpZwlgF8t3oHGf6zV-8m0BHzF95s6TwI_m4KSQMEGpA8wyfOPJXC-XS8ETWPthgksRH8sq3GsvMZtDWVOgtLmkeG-H5o9p-6_WXNYTRLtyMcaqSiXNj1_rTRaVQ_Q","registration_client_uri":"https://localhost:8443/register/2eb782b378ad78b40c8fe7b61034418e","client_id_issued_at":1543357448}},"https://localhost:8443/requestHistory/LreWQ2TR9nX1tT4Llra3WZ-taYJBCe29sNqTOafNwVg":"{"redirect_uri":"https://localhost:8443/.well-known/solid/login","response_type":"id_token token","display":"page","scope":["openid"],"client_id":"2eb782b378ad78b40c8fe7b61034418e","state":[54,140,84,11,185,138,131,223,8,73,105,215,59,183,62,255],"nonce":[99,180,154,178,231,182,191,178,28,214,241,92,225,102,225,151]}","oidc.session.privateKey":"{"alg":"RS256","d":"C4AW4IrEpArpw0uY0zA9VUnDcl7aTU6U7aiAWCiNGU5uLovpsbd5Myn7rPzqFzkK1JClibnXLfzmzOQJvVIZxLQwu1996BhCV4P_-J_gYIQRpH773VMv_vjT-QHH3tA8BHCHQ9FFyN6HZcKRmtiz0wHaOHjwbgXo9bZz8GVbGYIveada1Lk0dbw9FvArW89Nhu0ATKPk1k53zLFZLwUbKkvZkolwPeJFG5nhICWS2LbX4uesr7gf-ift0MiiI8_kClFwPYkgH2HKUs21LTShHmdu_StY5fcdRG_IITgt39dWZpJwcDnPImRxqdGvLa9AcezHWU0wOpeWNpHntfuwQ","dp":"oUBGVkDq0AVMmzuDY_nV6x4UQWpfION6jfhGrt8PxEpy4Qra-4vG0uVg8TZcSjYcmTwnMhwW4wlx-hpIx-q3gR-fGxq3TCzOL8Ae66BIO6OixG4ttdETsgNcCoqklKmw_jLehdTMd_HfC6PaOYAZpM-Pfg1cI-Ki2yCa3WBLhEM","dq":"lCs-S4krPoIC0YJqNqmzl97QuUk8EyO8Bvqy5gdrF4ozzDhBeDXN1-2eQrR59QIUJ4JggGPDZJB8KCxptyDMtBw5AEFLYCq_bdJfBDzrCFgcFBpgKkJpSRjUEJha3dPbG_thGTMcHwmf5xdVRK7YEVrTlxCCAS5YAOarYyzVKGE","e":"AQAB","ext":true,"key_ops":["sign"],"kty":"RSA","n":"pBjhNm9trgqwzzHHo1AfhVQJXwxa-L9p-Co_sDwLBynxAWYRXooOTd_xOmO3xcMjXwCebOAc-UKmTr9TEW_QOPX92497i73rlnQEDEDvBad_nQvH1ZZI6bIFgXpKjHpr-wXASE_vacPDMdZppa_rMUMz1Jj6WUhBUeet4KRg3rN3bUxSt7bKJc4Wp3RtofvI1fmHMQjjRZVLRhbghgeqA32YrN4zT-5ZnOYS2xInHLMdmtj8foeasZAOrLNR1a43PY1G5drB93BqGCQceQYmjJgQ0xm60wMV1r_y9IqWvHqqHmjBhj4TDGYwfDBvDirWcwpjajSWUz-tjhKIuYX9Qw","p":"0xV1aQ9sFfJz7CPt-lnUsdzjdbUc1JXrr9uI77PTFLxZ6Rx8ktQlCMp3rQmTI7_fWl9DkwVESMueb1bn7BikteNA-Goz8lmxq-dzUgc5nfmZIXrX2oAnoJUVDMwvfZimFi1yyJ7Gkd9Xy3uu-g6kBHbfRo_cU-NXh5ky1fwWyM","q":"xwPhNMtVOu6HxTkTr5QuvtVdEiiQU7GRknmDCfxte1GjxBq-7Z3-JtqY-8_RdZ_7WWvoclDEDwaZTNnJvJf79FC4aXLlAM2qrpDNMyjngo75OkmXSmU0oGlr_9WVThRJ2d6wfXAnd1LFWfXa1-Eh87-eNlhpZ1Wtx-1i6hNMh2E","qi":"HjyS0nl587DhmO0EYUlQPja_a6pl13vurRvYHjEpXYicaumcw1-F8yhn0mH-aAG4Oc1vqt3L219OQ8Vlhb3EYABPCGfjyRYbjwuSZ4qxYdEdV8Nh0ZdXvj6UZUX-lNxaraWn-9ISLqMWzLCiUEDN7FNNIPO9P62WA6Iq5C86Oqw"}","session":null,"appHashFragment":"","https://localhost:8443/requestHistory/M5HfjU2LzNlSz_wVvFYgZT2NdDlnQBwIAO-HtiWQXiA":"{"redirect_uri":"https://localhost:8443/.well-known/solid/login","response_type":"id_token token","display":"page","scope":["openid"],"client_id":"2eb782b378ad78b40c8fe7b61034418e","state":[170,153,211,145,157,141,102,184,158,38,5,94,40,138,62,84],"nonce":[73,136,123,54,206,150,81,83,181,142,209,189,150,43,69,140]}","https://localhost:8443/requestHistory/pngqmrbYBlhQX7wt5Z10LDMLfaDpgd6LPQBHVvYKLrw":"{"redirect_uri":"https://localhost:8443/.well-known/solid/login","response_type":"id_token token","display":"page","scope":["openid"],"client_id":"2eb782b378ad78b40c8fe7b61034418e","state":[156,64,223,18,21,115,122,201,98,163,218,79,245,178,162,202],"nonce":[27,99,190,50,80,122,130,180,155,110,22,21,190,127,127,141]}","https://localhost:8443/requestHistory/hUkfsKeJfOQIk2x84wesTjtZwgWWxd4z_PRUSbV2xPs":"{"redirect_uri":"https://localhost:8443/.well-known/solid/login","response_type":"id_token token","display":"page","scope":["openid"],"client_id":"2eb782b378ad78b40c8fe7b61034418e","state":[7,52,96,114,132,177,50,89,20,35,151,67,72,246,5,35],"nonce":[86,166,93,228,207,147,181,96,246,73,43,186,25,224,219,109]}","https://localhost:8443/requestHistory/kKxA6p6syCHfbtiQg0-1WvLKoe6t77Y20KoqVZX-Vvo":"{"redirect_uri":"https://localhost:8443/.well-known/solid/login","response_type":"id_token token","display":"page","scope":["openid"],"client_id":"2eb782b378ad78b40c8fe7b61034418e","state":[234,144,176,130,237,211,235,170,0,161,127,219,208,169,15,174],"nonce":[151,36,170,69,206,129,247,14,186,62,197,122,98,145,167,80]}","https://localhost:8443/requestHistory/tlhWpMbLVh9hraBbRRmy7vhbJlNoiVGuWOBC9DtmQII":"{"redirect_uri":"https://localhost:8443/.well-known/solid/login","response_type":"id_token token","display":"page","scope":["openid"],"client_id":"2eb782b378ad78b40c8fe7b61034418e","state":[41,20,48,28,29,251,97,174,5,242,43,61,205,172,138,250],"nonce":[181,172,3,246,65,242,138,194,52,15,146,80,142,248,195,141]}","https://localhost:8443/requestHistory/teByzB4Y0sUXtEkRXs1e0j0n8R5-Go3wCUfz9qomdno":"{"redirect_uri":"https://localhost:8443/.well-known/solid/login","response_type":"id_token token","display":"page","scope":["openid"],"client_id":"2eb782b378ad78b40c8fe7b61034418e","state":[170,234,22,163,127,27,26,204,60,175,57,170,235,142,156,234],"nonce":[112,170,78,228,234,76,227,234,64,94,20,5,13,184,97,12]}","https://localhost:8443/requestHistory/qlHWe4KUGGVvMrVb4NYXrVBYt78NFbycw7FKl9DFve8":"{"redirect_uri":"https://localhost:8443/.well-known/solid/login","response_type":"id_token token","display":"page","scope":["openid"],"client_id":"2eb782b378ad78b40c8fe7b61034418e","state":[238,27,64,78,43,254,35,167,252,57,2,253,141,150,255,149],"nonce":[137,231,130,160,227,127,97,57,44,158,136,19,229,249,100,92]}"}
  • Try to log in

How did it work with 4.x series servers?

Login worked

What happened when you tried the same with the 5.0.0 beta?

Account is unauthorized

Any material that will help, logs, error messages, etc.

Guide de contribution

Ouvrir le guide de contribution

Par où commencer

  1. Lisez l'issue en entier, puis le guide de contribution du projet.
  2. Signalez en commentaire que vous la prenez — cela évite que deux personnes fassent le même travail.
  3. Forkez le dépôt et travaillez sur une branche.
  4. Ouvrez une pull request qui référence le numéro de l'issue.

Piste de recherche

Commencez par reproduire l’échec de connexion sur le serveur Solid à l’adresse localhost:8443 avec les données local-storage fournies par solid-auth-client, puis comparez le comportement avec celui d’un serveur 4.x et de la version bêta 5.0.0. Le travail est considéré comme terminé lorsque les données local-storage 4.x générées précédemment ne produisent plus de connexion non autorisée.

Rédigé par le modèle d'indexation à partir du texte de l'issue.

Évaluation

Stack technique
javascript, nodejs
Domaine
authentication, backend
Type d'issue
Bug
Difficulté
4/5
Temps estimé
3-5 jours
Activité
À l'abandon
Clarté
À clarifier
Accessibilité débutants
25/100

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.